Debian/pglogical: medium 5.3
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during normal worker lifecycle
Action: Upgrade pglogical to 2.4.8-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.8-1 | - |
Fixed versions
| 2.4.8-1 |
Sources
- osv: DEBIAN-CVE-2026-50738#Debian:14/pglogical
- https://security-tracker.debian.org/tracker/CVE-2026-50738
published · modified · JSON